Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8b96ad85-88d9-30fb-808b-3dfec985cc4d.roa
File:                     8b96ad85-88d9-30fb-808b-3dfec985cc4d.roa (raw, json)
Hash identifier:          6KzjbyCrUQEtUcn+hnZFkw0uOLVfbtwA0PiJHfNcJOQ=
Subject key identifier:   0F:83:3D:28:4C:AE:58:C5:6D:5B:82:FC:F5:E1:57:B8:15:89:F5:62
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858430A13FC7805B2EC58FA0FB100
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8b96ad85-88d9-30fb-808b-3dfec985cc4d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:13:fc:78:05:b2:ec:58:fa:0f:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2067c7a9-ceb5-4bd4-b62a-2f0d265dcd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:24:6d:28:15:c5:54:f3:65:54:56:74:68:0d:
                    f2:9d:54:1a:a1:73:bb:82:e3:0d:5f:ca:38:1d:e4:
                    fb:4f:9d:a8:cd:09:3c:91:2d:99:5b:c1:43:79:93:
                    05:5d:f4:f6:44:0b:ea:94:41:25:ab:88:8f:d3:30:
                    3c:96:4a:09:13:a0:a4:8d:d1:20:1a:a8:56:0b:cd:
                    3d:39:05:c8:58:89:6e:b2:55:8a:96:58:12:f7:19:
                    55:73:1d:fd:2f:8c:f9:96:a3:6e:1c:b5:6f:fd:e0:
                    4e:22:d8:af:03:14:7b:b6:2b:ff:0b:40:8b:26:6d:
                    23:fd:e2:10:89:1f:27:43:56:3b:15:1b:69:63:9e:
                    f1:a6:d7:7f:24:79:84:44:43:ce:25:0c:e0:57:2f:
                    51:b1:63:59:62:d8:f1:e3:e2:c8:be:65:6b:aa:31:
                    a1:9f:c3:96:f1:9e:59:87:af:8d:e1:b0:9c:a4:26:
                    12:30:51:c7:51:14:ab:5b:5b:3a:9c:9a:5c:07:e2:
                    f9:50:b2:54:81:ad:7f:b5:19:7c:3b:6c:60:1d:ed:
                    01:2f:da:12:ef:3f:ae:23:8f:a3:b2:50:1f:7f:1c:
                    70:6a:63:a1:f9:34:07:2e:47:31:6b:94:39:6a:76:
                    98:f3:09:bd:7c:f4:a1:8e:39:f5:98:fd:b6:89:d8:
                    2b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:3D:28:4C:AE:58:C5:6D:5B:82:FC:F5:E1:57:B8:15:89:F5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/8b96ad85-88d9-30fb-808b-3dfec985cc4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:05:0f:9f:0c:44:94:41:f9:d2:4b:a4:c1:d6:b5:a9:fe:9b:
         69:3e:89:46:94:29:01:ff:42:d4:97:21:14:1d:d6:26:5f:bb:
         0d:46:40:06:74:96:ed:fb:81:c0:59:54:cc:45:56:4d:3a:05:
         de:44:84:45:75:be:d2:13:16:20:ba:2e:75:b5:92:e0:e4:a8:
         d3:ae:c5:c3:f9:86:70:8d:4f:17:96:0a:13:ef:c1:9d:fd:69:
         a3:da:61:05:f2:64:3f:c7:56:8d:05:56:bc:bb:87:b8:aa:75:
         1c:3f:fb:67:1d:a4:05:36:ea:68:93:c6:fa:bd:13:1f:f1:c3:
         0e:7f:ea:2c:56:bb:0d:35:84:f5:75:06:44:e1:30:a0:79:e9:
         82:bc:de:c5:5c:2d:31:ab:bd:b8:99:4c:fd:d5:b6:8f:49:bc:
         b8:93:c1:de:0f:02:38:70:25:30:38:e5:ad:de:b1:b9:30:ad:
         8e:3e:3e:91:1e:46:4a:b9:a6:5a:8b:84:82:0e:e2:59:92:fc:
         b5:9a:6f:2a:99:aa:ef:db:65:2b:aa:f3:8e:13:ea:7c:30:71:
         67:a8:0c:9d:e6:d8:6a:8c:7a:ba:fc:76:50:97:69:98:6c:2f:
         99:be:f8:04:d0:e0:e1:e1:d8:6a:c4:e4:9d:bb:8b:b7:e5:0f:
         88:1e:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:57 2024 by rpki-client on console-fra.rpki-client.org